Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json)
Hash identifier: Xr+sdvVqAs7nHpI8XVthod2HE9wIe9jBd2Kny2vNpBA=
Subject key identifier: 36:AF:E4:A9:2E:26:ED:54:6C:A6:2A:F4:25:4B:59:2E:D1:09:4F:9A
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial: 0940
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
Manifest number: 0932
Signing time: Thu 30 Jan 2025 20:22:46 +0000
Manifest this update: Thu 30 Jan 2025 20:22:45 +0000
Manifest next update: Thu 06 Feb 2025 20:22:45 +0000
Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: vF2ZfXO7DXL3tCqe1ERQtHCkJl1bAR4caF3nFLekQCo=)
2: 9738F1BAD46611ECA1A27035C4F9AE02.roa (hash: WTrtE83EIPIFAQBP1Rd+6bCGyCXh3/D0h/wvCesMWrU=)
3: 6CEF4F06697C11EEBAF2E544C4F9AE02.roa (hash: Zf62lP/wVBucTVDv//7CsthHyoB46FPVyR5yKdn9a8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2368 (0x940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Validity
Not Before: Jan 30 20:22:45 2025 GMT
Not After : Feb 6 20:22:45 2025 GMT
Subject: CN=679bdf95-b10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:2b:7c:b4:c5:f2:8a:72:d0:ce:9d:31:23:
b1:4b:70:bf:52:89:de:82:ea:89:66:15:ec:af:6f:
39:23:38:d4:df:f5:89:d1:ca:36:54:64:7d:ef:2b:
e1:98:8c:13:0e:1a:ef:66:a1:c3:7b:e5:d7:fa:2c:
e0:70:d2:07:70:3a:d9:fc:0a:8c:7e:a0:59:b1:06:
56:67:83:79:93:ef:1f:50:95:3f:7a:10:bf:a5:fb:
24:e7:c3:c9:08:29:17:6d:87:80:04:dc:e2:1e:a6:
bd:b5:ea:54:fd:bd:60:63:78:8c:dc:9a:9d:a5:c7:
69:e3:05:67:e4:a4:b2:84:28:46:c6:3f:3f:87:99:
52:25:71:8c:f3:6f:f2:1a:45:cc:6c:db:e5:37:80:
f7:af:37:d8:d6:f0:7b:9c:78:32:3c:b4:fa:1c:e4:
a3:e5:be:b2:db:77:7d:c3:3f:0e:4c:2f:84:03:80:
9a:b1:64:e8:30:e4:b0:7f:e4:46:77:31:1d:33:52:
dc:e2:89:bc:ca:ab:cf:24:df:72:f0:f9:b8:b9:59:
1b:63:59:49:b9:ce:86:ec:1d:50:bb:d6:d7:a7:c0:
ac:78:ab:0b:8b:64:3c:be:f3:74:fe:3d:13:9c:f4:
33:08:e6:6e:6a:10:b1:90:21:2e:dd:1f:a2:37:7c:
a8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AF:E4:A9:2E:26:ED:54:6C:A6:2A:F4:25:4B:59:2E:D1:09:4F:9A
X509v3 Authority Key Identifier:
keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:92:3f:36:3c:49:5c:c7:36:05:ed:78:dd:7e:87:ce:12:b1:
5e:49:23:ca:0a:4a:ff:28:e2:37:5a:0f:de:b9:86:d0:67:2c:
06:3e:81:13:88:70:58:7c:49:7d:aa:7a:b5:dc:c4:4d:d9:55:
60:ec:33:84:f4:aa:9f:5f:3d:39:75:fc:65:1e:89:26:3e:1a:
b5:4e:da:75:99:9e:cd:e2:bc:c6:44:b1:59:a1:2f:d7:ec:9b:
c7:27:02:51:43:01:dc:48:59:56:7c:00:00:ca:44:39:c1:66:
7d:17:84:38:51:d6:ff:d6:a8:b5:a7:ab:e0:8a:bd:05:44:a7:
16:57:20:aa:d8:d3:ab:c0:c9:ff:ac:55:fe:4f:ad:d6:b6:b4:
0d:24:38:15:f2:0e:e3:e0:eb:c4:67:4e:18:04:51:73:2b:a3:
65:35:66:1a:10:f9:0a:79:a5:a3:28:07:21:bd:90:5d:a0:4a:
de:4f:6e:ed:66:36:28:d4:64:f7:39:84:99:22:1a:ca:71:f3:
80:63:fb:b4:6e:94:9c:d9:79:49:7f:e7:14:a1:c2:e2:75:5a:
68:78:90:43:b7:74:f1:03:de:39:73:96:d6:97:b1:f1:52:27:
08:f2:52:d4:c2:8a:5a:1e:a9:da:82:19:f3:34:5c:07:79:21:
c9:d0:c1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:26 2025 by rpki-client